OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Re: Question for WV? [Fwd: Re: [dkim-milter-beta] dkim-filter 2.4.0.Beta* failing with protocol error]

From: Tony Earnshaw (tonnihetnet.nl)
Date: Tue Nov 13 2007 - 13:38:13 CST


Wietse Venema skrev, on 13-11-2007 19:24:

>>> mlfi_negotiate() is the dkim-filter side of what libmilter is referring to
>>> as "xxfi_negotiate". I'll return 1 (SMFIS_REJECT) from that function if
>>> the MTA doesn't offer dkim-filter all of the actions it requires, namely
>>> SMFIF_ADDHDRS (the ability to add headers), SMFIF_CHGHDRS (the ability to
>>> change/remove headers) and SMFIF_SETSYMLIST (the ability to request
>>> specific macros/symbols from the MTA). Perhaps one of these is not being
>
> None of the Postfix versions implements SMFIF_SETSYMLIST.
>
> If the Milter complains that SMFIF_SETSYMLIST is unavailable in
> SOME Postfix versions, then I suspect Milter configuration issues.

> Speaking of which, did you provide Milter name and version

YES. Please my post again. For convenience's sake, I'll repeat it:

"Whilst 2.3.2 does an ok job, all (?) versions of 2.4.0"

> Milter command line

Fedora FC6:

. /etc/sysconfig/dkim-milter
# source function library
. /etc/rc.d/init.d/functions

RETVAL=0

start()
{
         echo -n $"Starting $PROG:"
         daemon ${PROG} $CONFIG
         RETVAL=$?
         [ "$RETVAL" = 0 ] && touch /var/lock/subsys/dkim-milter
         echo
}

  Milter config file?

1551 [root:tru.leerlingen] /etc/rc.d/init.d # grep '^[^#]' /etc/dkim-filter

X-Header yes
Statistics /var/cache/dkim-milter/statistics
UserID milter
SyslogSuccess yes
Syslog yes
Socket inet:10004
SendReports yes
Selector tru2
On-DNSError accept
On-BadSignature accept
MTA ORIGINATING
Mode v
KeyFile /etc/certs/dkim-filter/tru2.private.pem
Domain leerlingen
Canonicalization relaxed/simple
BodyLengths yes

Best,

--Tonni

--
Tony Earnshaw
Email: tonni at hetnet dot nl